CVE-2017-7981

CVE-2017-7981 affects Tuleap before 9.7, where the Project Wiki uses PHPWiki 1.3.10 with a SyntaxHighlighter plugin. The root cause is a command-injection vector in the SyntaxHighlighter’s handling of the syntax argument, exploited via proc_open in PHP when a project wiki page contains a line lik...

CVE-2014-5519

Summary: CVE-2014-5519 affects PhpWiki 1.5.0’s Ploticus module. The vulnerability allows remote code execution by injecting shell metacharacters in a device option within the edit[content] parameter to index.php/HeIp, enabling arbitrary code execution on the affected server. Public exploit/tracki...